ProxySG & Advanced Secure Gateway

 View Only
  • 1.  Local user on Cold Standby Device

    Posted Aug 05, 2018 11:33 PM

    Hi,

     

    I need to import only local users configuration on my ASG device.

     

    I dont want to install any Post setup or other backup.

     

     



  • 2.  RE: Local user on Cold Standby Device

    Posted Aug 05, 2018 11:37 PM

    Hi Aboo,

     

                     If the list is small, I will recommend to configure it manually on the second box. If its troublesome, you can just copy the section and install it on the second box. Before that you will have to replace the "configuration-password-key" keyring on the Cold-Standby with the same keyring in the Active device.



  • 3.  RE: Local user on Cold Standby Device

    Posted Aug 06, 2018 02:14 AM

    Dear Aarvind,

     

    Thanks can we take it form sysinfo and install in Cold Standby only the portion of that part ?



  • 4.  RE: Local user on Cold Standby Device

    Posted Aug 06, 2018 03:27 AM

    Hi Aboo,

     

    Sysinfo will not be having the password hash of these users. You may want to use expanded config file or post setup for this.



  • 5.  RE: Local user on Cold Standby Device

    Posted Aug 06, 2018 04:13 AM
    Dear Aravind, Thanks but if i restore only configuration from sysinfo then i can change it from cli correct


  • 6.  RE: Local user on Cold Standby Device
    Best Answer

    Posted Aug 06, 2018 04:35 AM

    Hi Aboo,

     

                If you are copying the section from CLI, the password lines will only show as "" . You can find the sample below

     

    security local-user-list create LocalDB
    security local-user-list edit "LocalDB" ;mode
    user create "User1"
    user edit "User1" ;mode
    hashed-password ""
    exit
    exit

     

              You do have a option to add the password manually into this before applying to the new box. Change the line from hashed-password to password. Then give the password after it in clear text

     

    security local-user-list create LocalDB
    security local-user-list edit "LocalDB" ;mode
    user create "User1"
    user edit "User1" ;mode
    password
    mypassword
    exit
    exit

     

             You will need to do this for each local user.